General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 270 Views
  • 0 replies
  • 1 Likes

Resolved! Push dynamic update through Panorama

Hi all,

Does anyboby know if it's possible to either push dynamic (scheduled of course, don't want to do that manually every day) update from panorama to managed palo or configure palo for requesting their dynamic update to panorama ?

of course palo do

...

VinceM by L5 Sessionator
  • 3277 Views
  • 5 replies
  • 0 Likes

Just skype

Hi,

An environment like LAN - PAN - Proxy - Router - Internet

is there a way to block everything but allow just skype.No web browsing, nothing allowed except skype.

I tried some rules but skype couldn't connect.

Thanks.

panos by L6 Presenter
  • 3657 Views
  • 6 replies
  • 0 Likes

Palo Alto blocking Symantec Antivirus

My URL filter on my PA2050 is blocking https://143.127.102.40/mrclean as malware-sites.   This is Symantec SEP talking to the Symantec cloud.   A discussion of the URIs used by Symantec is located here: Clients connecting to an IP. | Symantec Connect

...

EdwinD by L3 Networker
  • 2383 Views
  • 1 replies
  • 0 Likes

cluster question

Hi,

Device1 Active

Device2 Passive

When a failover happens...it takes about 7-8 timeouts(45 second) : device1 passive device2 active

When a failover happens again  it takes about 1 timeout(good time):  device1 active  device2 passive

Any ideas ?

Thanks.

panos by L6 Presenter
  • 1927 Views
  • 3 replies
  • 0 Likes

SYSTEM ALERT: Version 5.0.5

Hi All,

After upgrading to version 5.0.5 i have a strange thing....

---

severity: high

opaque: HA Group 1: Peer version of 5.0.5 not compatible with the HA2 keep-alive setting; disabling HA2 keep-alive

---

severity: critical

opaque: HA Group 1: All HA1 conn

...

Oleksandr by L3 Networker
  • 3225 Views
  • 9 replies
  • 0 Likes

Resolved! M-100 Panorama Mode Collectors in HA

Probably an obvious question but the documentation doesn't seem to reference this directly...

If I have 2 x M-100s in HA, by default they are in a state where the primary is listed within the "Managed Collectors".  From what I understand the logs are

...

dmeier2 by Not applicable
  • 2715 Views
  • 2 replies
  • 0 Likes

Resolved! Global Protect with Active Directory Accounts

Hello all,

I have what might be a simple question. I want to authenticate to Global Protect SSL-VPN using my current Active Directory users. Do I need to have the User ID software installed on a domain server to do this? If thats needed for LDAP can o

...

jnunham by Not applicable
  • 2923 Views
  • 5 replies
  • 0 Likes

Resolved! Bi-directional NAT is still requiring a /32 static route

I have two VPN tunnels established with a vendor.  1 is in San Digeo and 1 is in Las Vegas.  The subnet in SD uses 10.220.1.0/24 and LV uses 10.220.2.0/24.  With both tunnels they want me to NAT my IP of 172.16.1.235 to 10.200.249.30.  I have a NAT s

...

nthen by L3 Networker
  • 3665 Views
  • 4 replies
  • 0 Likes

Resolved! HA PORT CONFIGURATION IN 4.1.12?

Hello world,

I have done an upgrade of PA2050 cluster in 4.0.9 to 4.1.12. In 4.0.9 the link speed and duplex for HA PORT was forced.

after the uprade in 4.1.12 I lost a lot of packet and when I tried to do a commit I had an error message.

Commit failed

...

alle by L3 Networker
  • 2688 Views
  • 2 replies
  • 0 Likes

Communication within different Trust Zones

Hi,

I am working with PAN-500 3.0.9.

I have configured 2 trust zones and 2 untrusted zones.

l3-trust IP 192.168.0.254/22; l3-untrust 200.78.x.x

l3-trust2 IP 192.168.10.254/24; l3-untrust 201.161.x.x

I need that users from l3-trust get access to servers lo

...

Resolved! Block but don't log

Is there a way to block some vulnerabilities or spyware without logging them? For instance I would like to block all the Microsoft SQL Server Stack Overflow Vulnerability but I am tired of them skewing some of our charts and stats. it looks like I ca

...

jmayne by Not applicable
  • 2468 Views
  • 3 replies
  • 0 Likes

Resolved! LDAP - Group Mapping with Child Domain users

Hi all,

We'd like to use an Active Directory group in our root domain (e.g. "company.com") to control GlobalProtect authentications. Let's name this AD group "VPN Access" (it's a "Universal" Security Group). It contains user objects from the root doma

...

oschuler by L4 Transporter
  • 5092 Views
  • 2 replies
  • 0 Likes

NAT rule for IPSEC VPN using NAT-T

I'm running PANOS 4.0.13 and I've enabled NAT-T via the command line.  I'm having trouble getting traffic to pass and I assume it must be my NAT policy.

1. I set a destination NAT as the vendor will be the initiator.  The NAT is defined like this:

srcz

...

iguarino by L0 Member
  • 2530 Views
  • 2 replies
  • 0 Likes

Resolved! PAN-OS 5.0.5 :Commit failed

Hello,

I have upgrade my firewall from 5.0.1 to 5.0.5 successfully.

But when I am trying to commit. It is giving below error.

Operation

Commit

Result

Failed


Details vsys -> vsys1 -> global-protect -> global-protect-portal -> portal-tunnel -> client-confi

...

u22443 by Not applicable
  • 2392 Views
  • 3 replies
  • 0 Likes
  • 23634 Posts
  • 107 Subscriptions
Top Liked Authors
Labels